VulnSocial

CVE-2026-1964Disclosure(wekan_project / wekan)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation causes improper access controls. Remote exploitation of the attack is possible. Upgrading to version 8.21 will fix this issue. Patch name: 545566f5663545d16174e0f2399f231aa693ab6e. It is advisable to upgrade the affected component.

wekan_project CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-266CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wekan

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-05); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
wekan_project
Products
wekan

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-05: 1Mentions · 2026-02-06: 1Technical Details · 2026-02-05: 1Technical Details · 2026-02-06: 102-0502-06
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-051
Disclosure1
2026-02-061
General1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-1964 A vulnerability was determined in WeKan up to 8.20. This impacts an unknown function of the file models/boards.js of the component REST Endpoint. This manipulation caus… https://www.cve.org/CVERecord?id=CVE-2026-1964

    Post summary

    The post notes CVE-2026-1964 as a vulnerability in WeKan up to version 8.20 affecting an unknown function in models/boards.js of the REST Endpoint, without mentioning PoC, exploit, active use, or patches.

    00010226
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-1964 Improper Access Controls Vulnerability in WeKan REST Endpoint Before 8.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1964 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    A tweet announces CVE-2026-1964, an Improper Access Controls issue in WeKan REST endpoints before version 8.21, with links to detailed vulnerability information and a notification.

    0000055
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwekan_projectwekan---

Explore more

Back to dashboardwekan_project CVEswekan vulnerabilities